[rds-devel] [PATCH net-next] net/rds: Fix info leak in rds6_inc_info_copy()
David Miller
davem at davemloft.net
Sat Aug 24 14:20:47 PDT 2019
From: Ka-Cheong Poon <ka-cheong.poon at oracle.com>
Date: Wed, 21 Aug 2019 20:18:24 -0700
> The rds6_inc_info_copy() function has a couple struct members which
> are leaking stack information. The ->tos field should hold actual
> information and the ->flags field needs to be zeroed out.
>
> Fixes: 3eb450367d08 ("rds: add type of service(tos) infrastructure")
> Fixes: b7ff8b1036f0 ("rds: Extend RDS API for IPv6 support")
> Reported-by: 黄ID蝴蝶 <butterflyhuangxx at gmail.com>
> Signed-off-by: Dan Carpenter <dan.carpenter at oracle.com>
> Signed-off-by: Ka-Cheong Poon <ka-cheong.poon at oracle.com>
Why would an info leak bug fix, present in current kernels, be targetted
at 'net-next' instead of 'net'?
Please retarget this at 'net' properly, thank you.
More information about the rds-devel
mailing list